Effective Date: 2. 11. 2026
At brainylab, we take your privacy and data protection seriously. This Privacy Policy explains how we collect, use, and protect your personal data when you engage with our services. We are committed to ensuring that your personal data is handled securely, transparently, and in full compliance with the General Data Protection Regulation (GDPR).
1.Who We Are
brainylab d.o.o. is a creative development studio based in Ljubljana, Slovenia. We specialize in providing AI and gamification marketing solutions to enhance user engagement and deliver effective digital experiences.
- Company Name:
- brainylab d.o.o.
- Address:
- Tacenska cesta 26, 1210 Ljubljana-Šentvid, Slovenia
- Email:
- hi@brainylab.io
2.What Data We Collect
We strive to minimize the collection of personal data. When you interact with our website or use our services, we may collect the following types of data:
- Personal Data: Information you voluntarily provide, such as your name, email address, and other contact details when you subscribe to our newsletters, download content, or engage with us through forms.
- Anonymized Usage Data: We use the Plausible Analytics tool, which provides us with aggregated and anonymized data. This means that we do not collect any personal information, such as IP addresses or cookies that could identify individual users. The data helps us understand general trends and usage patterns, without compromising user privacy.
- Analytics and Advertising Data (only with your consent): If you allow it in the cookie banner, Google Analytics, Google Ads and the Meta Pixel record which pages you visit, how you arrived (for example from one of our ads) and whether you sent us a form. This uses cookies and online identifiers such as a pseudonymous browser ID and your IP address. See section 8.
3.How We Use Your Data
We use the data we collect to:
- Provide and improve our services
- Respond to your inquiries and communications
- Analyze website traffic and user behavior to enhance the user experience
- Send marketing communications, if you have explicitly consented to receive them
4.Legal Basis for Processing
We process your data based on the following legal grounds:
- Consent: Where you have provided explicit consent, such as subscribing to newsletters or opting into marketing communications.
- Consent for Cookies: Analytics and marketing cookies (Google Analytics, Google Ads, Meta Pixel) are only set after you agree in the cookie banner. You can change or withdraw your choice at any time.
- Legitimate Interest: For website analytics and internal business operations that improve our services, such as through anonymized usage data. We ensure this does not override your rights and freedoms.
- Contractual Obligation: To fulfill any contract or agreement we have with you.
5.Data Sharing
We do not share your personal data with third parties unless it is necessary to provide our services, comply with legal obligations, or with your explicit consent.
If you accept analytics or marketing cookies, Google Ireland Limited and Meta Platforms Ireland Limited process the data described in section 8. They may transfer it to the United States, under the EU-U.S. Data Privacy Framework and the European Commission’s Standard Contractual Clauses.
All other data processing is conducted within the European Union (EU), and your data will not be transferred outside the EU unless necessary and compliant with the GDPR’s standards.
6.Data Retention
We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, regulatory, or internal policy requirements. Anonymized usage data may be retained indefinitely for analytical purposes.
7.Your Rights
As a data subject, you have the following rights under the GDPR:
- Right to Access: You can request information about the personal data we hold about you.
- Right to Rectification: You can ask us to correct or update inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data, under certain circumstances.
- Right to Restriction of Processing: You can ask us to limit the processing of your data.
- Right to Data Portability: You can request to receive your data in a structured, commonly used format.
- Right to Object: You can object to the processing of your personal data where we rely on legitimate interests.
- Right to Withdraw Consent: If we process your data based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at hi@brainylab.io.
9.Data Security
We implement strict security measures to protect your personal data. All our servers and databases are hosted within the European Union and managed in accordance with industry-standard security protocols. Access to personal data is restricted to authorized personnel only, and we have robust internal processes to safeguard against unauthorized access, loss, or misuse of data.
10.Third-Party Links
Our website may contain links to third-party websites or services that are not owned or controlled by brainylab. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies when you visit them.
11.Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, technical, or regulatory reasons. Any changes will be posted on this page, and we encourage you to review it periodically. Your continued use of our services after the changes are made will indicate your acceptance of those changes.
12.Contact Us
If you have any questions or concerns about this Privacy Policy, or if you wish to exercise your rights under the GDPR, please contact us at:
- Email:
- hi@brainylab.io
- Address:
- brainylab d.o.o., Tacenska cesta 26, 1210 Ljubljana-Šentvid, Slovenia